Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/8xRb-DPzCzHiHinhBGSiJKFCfq0.roa
File: 8xRb-DPzCzHiHinhBGSiJKFCfq0.roa (raw, json)
Hash identifier: A9plqAZ6tW823XWa6YGs85LIMKZtOqJdz/q0S+8zYRE=
Subject key identifier: F3:14:5B:F8:33:F3:0B:31:E2:1E:29:E1:04:64:A2:24:A1:42:7E:AD
Certificate issuer: /CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Certificate serial: 019425FDBB54D147FDCDACA4FF54B8248628
Authority key identifier: D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/8xRb-DPzCzHiHinhBGSiJKFCfq0.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49296
IP address blocks: 185.71.4.0/24 maxlen: 24
185.71.5.0/24 maxlen: 24
185.71.6.0/24 maxlen: 24
185.71.7.0/24 maxlen: 24
217.148.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bb:54:d1:47:fd:cd:ac:a4:ff:54:b8:24:86:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3145bf833f30b31e21e29e10464a224a1427ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:32:14:e4:30:9d:46:63:99:d2:fa:15:cc:
50:0c:72:bd:7a:4c:0e:ef:9c:9a:a5:da:55:7c:a3:
49:ee:13:94:94:0f:84:c7:3b:a5:e5:fb:07:4a:12:
d4:7c:47:37:46:9e:ef:ff:57:c5:01:1c:2f:a0:8b:
7a:f0:c3:52:53:51:99:cd:82:9f:5f:26:15:91:68:
b4:da:d6:e3:d0:79:f7:38:87:8c:02:d5:7a:85:5a:
5d:76:e7:2f:71:7e:3b:c7:9c:6e:5e:71:53:38:10:
91:c9:cf:31:d4:76:9b:12:1c:63:ba:7e:13:17:91:
14:48:47:fd:f9:f2:b2:9c:03:24:c7:f0:76:b7:d5:
32:20:03:9f:bb:98:a9:1a:60:a2:44:e7:de:c0:95:
f6:2a:c9:71:2d:f8:d6:a0:2a:5e:e6:19:55:08:e9:
30:1b:de:1c:9d:70:b1:6a:c9:43:50:b6:b0:46:49:
b6:f9:3f:02:b0:fd:93:18:0b:c8:49:40:6b:5b:af:
81:d2:13:2f:28:f4:e8:69:d0:c8:cc:02:cc:0d:19:
b4:f8:f0:9c:e1:a4:29:f0:9f:0a:db:95:3a:40:74:
7b:fb:83:bc:18:ff:23:43:02:87:f9:ab:74:f1:50:
ea:2d:51:88:ef:aa:45:50:42:ec:11:fb:e6:17:8f:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:14:5B:F8:33:F3:0B:31:E2:1E:29:E1:04:64:A2:24:A1:42:7E:AD
X509v3 Authority Key Identifier:
keyid:D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/8xRb-DPzCzHiHinhBGSiJKFCfq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.4.0/22
217.148.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:52:69:7d:f3:e0:c9:b3:a3:93:3b:02:cb:4f:65:a8:98:74:
f8:76:86:38:4a:44:43:87:46:0a:62:b2:fd:34:df:ad:b1:22:
69:61:4b:f7:9d:e0:57:2d:6a:a7:42:ac:d0:ec:16:42:7b:49:
52:5f:15:66:23:9b:c1:72:d9:51:2c:e4:e1:d5:83:1f:59:bb:
39:16:77:1b:b4:54:5a:14:03:e2:86:7c:d1:56:8c:a3:bb:a9:
93:61:c9:43:b6:48:e3:28:a9:46:8a:fd:82:7b:62:56:db:f6:
7a:66:71:f6:6c:81:3a:3e:29:1b:70:5d:0e:c6:58:2e:47:c3:
38:25:53:bf:74:60:ef:f5:c1:4b:62:28:e5:53:32:3d:64:bd:
f2:85:0c:3d:b1:63:76:f8:26:4b:2b:95:49:5e:3f:39:5a:3d:
dd:59:e0:bb:78:d8:9d:5e:26:44:87:f1:b9:b1:30:84:1e:db:
fa:e1:bb:74:98:f0:bd:58:b8:ba:43:04:04:17:41:b5:b8:c9:
cb:f0:9f:31:2a:4a:be:53:81:d0:23:80:89:7d:d3:ac:a3:65:
a4:74:2a:32:18:63:07:21:5d:a5:61:f8:4c:25:10:ae:bf:7c:
cd:6b:22:fc:24:6f:4a:a2:42:f0:d3:04:21:28:6a:d0:59:67:
4b:55:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:08:58 2025 by rpki-client